$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: ebXd8B2/lfG2zDatEnEXwBug0+VT2Ll8BWqk4kh7+HM= Subject key identifier: 4F:EB:5C:0A:C5:C0:65:FB:63:5E:7A:7F:6C:94:28:AC:F3:92:12:E5 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 75E94986D505075F8E9F270D170DE95C4F445D4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 0255 Signing time: Tue 04 Nov 2025 16:41:20 +0000 Manifest this update: Tue 04 Nov 2025 16:36:20 +0000 Manifest next update: Fri 07 Nov 2025 19:47:20 +0000 Files and hashes: 1: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: VAPS17takUl834nbAq/49pVhlvIxvOoWJH8QohAsGmM=) 2: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 19:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e9:49:86:d5:05:07:5f:8e:9f:27:0d:17:0d:e9:5c:4f:44:5d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Nov 4 16:36:20 2025 GMT Not After : Nov 7 19:47:20 2025 GMT Subject: CN=4FEB5C0AC5C065FB635E7A7F6C9428ACF39212E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:cc:ed:b3:2e:61:8c:cd:19:86:72:95:7a: f5:29:7f:f6:46:ce:04:f0:3d:1e:dc:c5:ed:95:36: f8:46:a5:76:86:7f:b7:78:f6:ea:65:79:e8:8e:0d: 11:23:9a:1d:b6:78:ab:af:fb:af:32:03:c1:fb:5d: 32:e0:6c:7a:4a:26:1c:d3:0e:06:f9:e9:ad:fc:0d: 8b:f9:3e:8b:87:b7:50:53:8b:e6:5b:95:a5:04:ec: 27:8d:67:8f:70:dc:d3:a6:3b:f9:ac:26:60:ec:59: 25:e9:cb:bb:b4:a8:91:fd:61:0d:78:51:54:bc:e6: 82:68:67:1c:dd:01:9a:41:16:8b:63:00:3f:ec:ca: 94:3d:24:05:63:df:ca:4d:fd:ee:0f:da:07:ac:b6: c0:3f:04:af:a9:4f:10:fd:40:77:d3:cf:86:2c:57: 68:bd:f8:e1:14:bc:cb:f2:19:16:5d:55:9f:bb:35: 2d:d1:c4:90:0f:58:dd:d0:39:69:e7:cf:bf:00:ae: 5d:91:9d:78:2a:9d:21:c8:f3:2f:31:2a:2c:19:aa: cf:02:17:a8:92:e3:2f:56:1f:ab:b6:ce:2d:d7:1f: 47:7b:73:9e:e1:8c:9d:6d:ae:3f:c5:fa:88:ff:ed: cc:a5:f7:72:c2:1c:2b:e1:04:66:d7:7c:e4:9b:e8: 9c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EB:5C:0A:C5:C0:65:FB:63:5E:7A:7F:6C:94:28:AC:F3:92:12:E5 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:af:e0:b8:11:de:fa:b1:54:bc:20:81:64:2c:85:a4:e6:d0: 0c:8c:39:28:2e:3d:8d:c2:12:9a:ce:ec:55:82:46:8a:c9:1d: 3c:de:31:a2:98:6b:b5:cb:09:7c:66:cc:1f:88:ac:35:24:93: 48:e6:3d:fd:35:e0:a9:33:de:93:83:82:f6:3c:41:99:4c:33: ab:20:56:2e:80:d4:9b:f0:b5:0c:7a:0d:f6:80:8a:74:24:72: b9:ee:51:f1:42:1d:50:fb:e6:d9:62:a1:0a:b1:31:0d:31:d0: dd:88:2a:68:52:bf:46:a2:88:e1:8b:cc:5d:72:5b:95:8d:8c: 9c:72:e5:80:ac:87:fe:56:a4:a9:fe:0d:54:f0:f1:b4:d3:18: 7a:a4:58:47:f8:0f:1d:7f:ef:9a:9b:cd:0f:2a:1b:d9:ed:24: df:40:b0:34:48:ee:27:0f:a6:af:61:d7:6d:aa:4d:53:a2:ea: 67:8b:b6:2c:13:7b:f6:28:35:6f:de:35:2a:18:a1:25:f3:42: 92:2c:54:d1:66:04:a9:90:c5:3a:70:6e:0a:a4:56:22:0d:29: b5:e5:8e:2a:7c:0d:e4:ef:73:78:5e:6a:0c:52:70:8f:7e:f0: ca:e7:a9:63:4a:7d:cf:1d:7c:df:2c:63:e2:59:f8:34:2b:87: 92:53:61:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdelJhtUFB1+OnycNFw3pXE9EXUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNTExMDQxNjM2MjBaFw0yNTExMDcxOTQ3MjBaMDMxMTAvBgNV BAMTKDRGRUI1QzBBQzVDMDY1RkI2MzVFN0E3RjZDOTQyOEFDRjM5MjEyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xMztsy5hjM0ZhnKVevUpf/ZG zgTwPR7cxe2VNvhGpXaGf7d49upleeiODREjmh22eKuv+68yA8H7XTLgbHpKJhzT Dgb56a38DYv5PouHt1BTi+ZblaUE7CeNZ49w3NOmO/msJmDsWSXpy7u0qJH9YQ14 UVS85oJoZxzdAZpBFotjAD/sypQ9JAVj38pN/e4P2gestsA/BK+pTxD9QHfTz4Ys V2i9+OEUvMvyGRZdVZ+7NS3RxJAPWN3QOWnnz78Arl2RnXgqnSHI8y8xKiwZqs8C F6iS4y9WH6u2zi3XH0d7c57hjJ1trj/F+oj/7cyl93LCHCvhBGbXfOSb6JxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT+tcCsXAZftjXnp/bJQorPOSEuUwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiv4LgR3vqxVLwggWQshaTm0AyMOSguPY3C EprO7FWCRorJHTzeMaKYa7XLCXxmzB+IrDUkk0jmPf014Kkz3pODgvY8QZlMM6sg Vi6A1JvwtQx6DfaAinQkcrnuUfFCHVD75tlioQqxMQ0x0N2IKmhSv0aiiOGLzF1y W5WNjJxy5YCsh/5WpKn+DVTw8bTTGHqkWEf4Dx1/75qbzQ8qG9ntJN9AsDRI7icP pq9h122qTVOi6meLtiwTe/YoNW/eNSoYoSXzQpIsVNFmBKmQxTpwbgqkViINKbXl jip8DeTvc3heagxScI9+8MrnqWNKfc8dfN8sY+JZ+DQrh5JTYV8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:47 2025 by rpki-client